General

  • Target

    2024-04-05_a66326b49de56a243b3648cb13a5e373_cryptolocker

  • Size

    95KB

  • MD5

    a66326b49de56a243b3648cb13a5e373

  • SHA1

    c92e33b944443c68106c3efafdf176cb58a652fb

  • SHA256

    6e5c46e78409d64a39d148b537d47582042d2bf5724895f1321d3f73620386b4

  • SHA512

    a7998d9a81db75e5eea577acafe1a0926ffbd9069741c3deeee2f610e5b205f5dfe599fb4fbf3b58a14e8b211fd28e7c9ebe163621eee504a6006bbfd31ec775

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp01f:AnBdOOtEvwDpj6zN

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-05_a66326b49de56a243b3648cb13a5e373_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections